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Reply to Office Action of January 24, 2006 

Amendments To The Claims 

This listing of claims will replace all prior 
versions, and listings, of claims in the application: 

Listing of Claims ; 

1. (Currently amended) A method for diagnosis of a 
system made up of a plurality of interlinked modules, 
comprising : 

receiving an alarm from the system indicative of a fault 
in one of the modules; 

responsive to the alarm, constructing a causal network 
associating the fault with malfunctions in one or more of the 
modules that may have led to the fault and relating a 
conditional probability of the fault to respective 
probabilities of the malfunctions; 

based on the alarm and the causal network, updating at 
least one of the probabilities of the malfunctions; and 

proposing a diagnosis of the alarm responsive to the 
updated probabilit ies_^ 

wherein receiving the alarm comprises gathering event 
reports from the plurality of the modules in the system, and 
extracting the alarm from the, event reports, and 
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wherein extracting the alarm comprises extracting a 
sequence of alarms occurring at mutually proximal times, 
including the alarm indicative of the fault in the one of the 
modules, and wherein updating the at least one of the 
probabilities comprises processing the sequence of the alarms 
so as to update the probabilities . 

2. (Canceled) 

3. (Currently amended) A method according to claim 2 
claim 1 , wherein gathering the event reports comprises 
receiving a report of a change in configuration of the system, 
and wherein constructing the causal network comprises 
constructing the causal network based on the changed 
configuration . 

4. (Original) A method according to claim 3, wherein 
constructing the causal network based on the changed 
configuration comprises maintaining a database in which the 
configuration is recorded, and updating the database 
responsive to the report of the change in the configuration, 
for use in constructing the causal network. 

5. (Canceled) 
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6. (Currently amended) A method according to claim 5 
claim 1 , wherein extracting the sequence of the alarms 
comprises defining respective lifetimes for the alarms, 
responsive to expected delays in receiving the alarms from the 
system, and selecting the alarms to extract from the sequence 
responsive to the respective lifetimes. 

7. (Original) A method according to claim 6, wherein 
selecting the alarms to extract comprises selecting the alarms 
that occurred within their respective lifetimes of a time of 
occurrence of the alarm indicative of the fault in the one of 
the modules responsive to which the causal network is 
constructed. 

8. (Currently amended) A method according to claim 5 
claim 1 , wherein constructing the causal network comprises 
defining an expected alarm that would be caused by one of the 
malfunctions in the one or more of the modules, and wherein 
processing the sequence of the alarms comprises updating the 
probabilities responsive to an occurrence of the expected 
alarm in the extracted sequence of alarms. 

9. (Currently amended) A method according to claim 5 
claim 1 , wherein constructing the causal network comprises 
defining a template comprising a group of nodes in the network 
corresponding to a category of the modules in the system and 
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an expected alarm that would be caused by one of the 
malfunctions in the. modules in the category, and instantiating 
the template in the causal network responsive to an occurrence 
of the expected alarm in the extracted sequence of alarms. 

10. (Original) A method according to claim 1, wherein 
the plurality of interlinked modules comprises multiple 
instances of a given one of the modules interlinked in a 
regular pattern, and wherein constructing the causal network 
comprises defining a template comprising a group of nodes in 
the network corresponding to the given one of the modules, and 
instantiating the template with respect to one or more of the 
modules responsive to the alarm . 

11. (Original) A method according to claim 10, wherein 
defining the template comprises identifying an expected alarm 
that would be caused by one of the malfunctions in one of the 
instances of the given one of the modules, and wherein 
instantiating the template comprises adding an instance of the 
template to the network responsive to an occurrence of the 
expected, ala.rm, 

12. (Original) A method according to claim 1, wherein 
constructing the causal network comprises identifying a local 
fault condition in the one of the modules in which the fault 
occurred, and responsive to the local fault condition, linking 
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the fault in the causal network to one of the malfunctions 
occurring in the one of the modules . 

13. (Currently amended) A method according to claim 1 
for diagnosis of a system made up of a plurality of 
interlinked modules, comprising: 

receiving an alarm from the system indicative of a fault 
in one of the modules; 

responsive to the alarm, constructing a causal network 
associating the fault with malfunctions in one or more of the 
modules that may have led to the fault and relating a 
conditional probability of the fault to respective 
probabilities of the malfunctions; 

based on the alarm and the causal network, updating at 
least one of the probabilities of the malfunctions; and 

proposing a diagnosis of the alarm responsive to the 
updated probabilities , 

wherein constructing the causal network comprises 
identifying a first fault condition occurring in a first one 
of the modules due to a connection with a second one of the 
modules in the system, and responsive to the first fault 
condition, linking the fault in the causal network with a 
second fault condition occurring in the second one of the 
modules . 
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14. (Original) A method according to claim 13, wherein 
linking the fault comprises determining that a possible cause 
of the second fault condition is due a further connection 
between the second one of the modules and a third one of the 
modules in the system, and responsive to the further 
connection, linking the fault in the causal network with a 
third fault condition occurring in the third one of the 
modules . 

15. (Currently amended) A method according to claim 1 
for diagnosis of a system made up of a plurality of 
interlinked modules, comprising: 

receiving an alarm from the system indicative of a fault 
in one of the modules; 

responsive to the alarm, constructing a causal network 
associating the fault with malfunctions in one or more of the 
modules that may have led to the fault and relating a 
conditional probability of the fault to respective 
probabilities of the malfunctions; 

based on the alarm and the causal network, updating at 
least one of the probabilities of the malfunctions; and 

proposing a diagnosis of the alarm responsive to the 
updated probabilities . 
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wherein constructing the causal network comprises adding 
to the causal network multiple occurrences of one of the 
malfunctions responsive to the respective probabilities of the 
malfunctions, and linking the fault in the causal network to 
the multiple occurrences. 

16. (Original) A method according to claim 15, wherein 
linking the fault to the multiple occurrences comprises 
determining one or more fault conditions that are caused by 
each of the occurrences, and linking at least some of the 
fault conditions to the fault. 

17. (Currently amended) A method according to claim 1 
for diagnosis of a system made up of a plurality of 
interlinked modules, comprising: 

receiving an alarm from the system indicative of a fault 
in one of the modules; 

responsive to the alarm, constructing a causal network 
associating the fault with malfunctions in one or more of the 
modules that may have led to the fault and relating a 
conditional probability of the fault to respective 
probabilities of the malfunctions; 

based on the alarm and the causal network, updating at 
least one of the probabilities of the malfunctions; and 



- 8 - 



^Appln. No. 09/893 , 006 

Amdt. dated April 24. 2006 

Reply to Office Action of January 24, 2006 



proposing a diagnosis of the alarm responsive to the 
updated probabilities , 

wherein updating the at least one of the probabilities of 
the malfunctions comprises assessing a mean time between 
failures of the one or more of the modules. 

18. (Original) A method according to claim 1, wherein 
the probabilities of the malfunctions are defined in terms of 
a probability distribution having a mean and a moment, and 
wherein updating the at least one of the probabilities 
comprises reassessing the mean and the moment of the 
distribution. 

19. (Original) A method according to claim 18, wherein 
the probability distribution comprises a failure rate 
distribution, and wherein reassessing the mean and the moment 
comprises updating the failure rate distribution using a 
Bayesian Reliability Theory model. 

20. (Original) A method according to claim 1, wherein 
proposing the diagnosis comprises comparing one or more of the 
updated probabilities to a predetermined threshold, and 
invoking diagnostic action when the one of the probabilities 
exceeds the threshold. 
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21. (Original) A method according to claim 20, wherein 
invoking the diagnostic action comprises notifying a user of 
the system of the diagnosis. 

22. (Original) A method according to claim 21, wherein 
notifying the user comprises providing an explanation of the 
diagnosis based on the causal network. 

23. (Original) A method according to claim 20, wherein 
invoking the diagnostic action comprises performing a 
diagnostic test to verify the malfunctions, wherein the test 
is selected responsive to the one of the probabilities 
exceeding the threshold. 

24. (Original) A method according to claim 23, and 
comprising modifying the causal network responsive to a result 
of the diagnostic test. 

25. (Currently amended) A method for diagnosis of a 
system made up of a plurality of interlinked modules, 
comprising: 

constructing a causal network associating a fault in one 
of the modules with malfunctions in two or more of the modules 
that may have led to the fault and relating a conditional 
probability of the fault to respective probability 
distributions of the malfunctions; 
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responsive to an alarm from the system indicative of the 
fault, updating the probability distributions of the 
malfunctions; and 

proposing a diagnosis of the alarm responsive to the 
updated probabilities^ 

wherein the two or more of the modules comprise first and 
second -modules , and wherein constructing the causal network 
comprises identifying a first fault condition occurring in the 
first module due to a connection in the system with the second 
module, and responsive to the first fault condition, linking 
the fault in the causal network with a second fault condition 
occurring in the second module . 

26. (Original) A method according to claim 25, wherein 
updating the probability distributions comprises assessing a 
mean time between failures of the two or more of the modules. 

27. (Original) A method according to claim 25, wherein 
the probability distributions have a mean and a moment, and 
wherein updating the probability distributions comprises 
reassessing the mean and the moment of the distribution. 

28. (Original) A method according to claim 27, wherein 
the probability distributions comprise failure rate 
distributions, and wherein reassessing the mean and the moment 
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comprises updating the failure rate distributions using a 
Bayesian Reliability Theory model. 

29. (Original) A method according to claim 25, wherein 
the two or more of the modules comprise the one of the modules 
in which the fault occurred, and wherein constructing the 
causal network comprises identifying a local fault condition 
in the one of the modules, and responsive to the local fault 
condition, linking the fault in the causal network to one of 
the malfunctions occurring in the one of the modules. 

30. (Canceled) 

31. (Currently amended) A method according to claim 30 
claim 25 , wherein the two or more of the modules comprise a 
third module, and wherein linking the fault comprises 
determining that a possible cause of the second fault 
condition is due a further connection in the system between 
the second module and the third module, and responsive to the 
further connection, linking the fault in the causal network 
with a third fault condition occurring in the third module. 

32. (Currently amended) Apparatus for diagnosis of a 
system made up of a plurality of interlinked modules, the 
apparatus comprising a diagnostic processor, which is coupled 
to receive an alarm from the system indicative of a fault in 
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one of the modules and which is arranged, responsive to the 
alarm, to construct a causal network associating the fault 
with malfunctions in one or more of the modules that may have 
led to the fault and relating a conditional probability of the 
fault to respective probabilities of the malfunctions, and 
based on the alarm and the causal network, to update at least 
one of the probabilities of the malfunctions so as to propose 
a diagnosis of the alarm responsive to the updated 
pr obabi 1 i t i e s^ 

wherein the processor is linked to receive event reports 
from the plurality of the modules in the system, and to 
extract the alarm from the event reports, and 

wherein the processor is coupled to extract a sequence of 
alarms occurring at mutually proximal times, including the 
alarm indicative of the fault in the one of the modules, and 
to process the sequence of the alarms so as to update the 
probabilities . 

33. (Canceled) 

34, (Currently amended) Apparatus according to claim 33 
claim 32 , wherein the event reports comprise a report of a 
change in configuration of the system, and wherein the 
processor is arranged to construct the causal network based on 
the changed configuration. 
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35- (Original) Apparatus according to claim 34, and 
comprising a memory, containing a database in which the 
configuration is recorded, and wherein the processor is 
coupled to update the database responsive to the report of the 
change in the configuration, for use in constructing the 
causal network - 

36. (Canceled) ; 

37. (Currently amended) Apparatus according to claim 36 
claim 32 , wherein respective lifetimes are defined for the 
alarms, responsive to expected delays in receiving the alarms 
from the system, and wherein the processor is arranged to 
select the alarms to extract from the sequence responsive to 
the respective lifetimes. 

38. (Original) Apparatus according to claim 37, wherein 
the processor is arranged to select the alarms that occurred 
within their respective lifetimes of a time of occurrence of 
the alarm indicative of the fault in the one of the modules 
responsive to which the causal network is constructed. 

39. (Currently amended) Apparatus according to claim 36 
claim 32 , wherein in constructing the causal network, the 
processor is arranged to define an expected alarm that would 
be caused by one of the malfunctions in the one or more of the 
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modules, and wherein the processor is further arranged to 
update the probabilities responsive to an occurrence of the 
expected alarm in the extracted sequence of alarms. 

40. (Currently amended) Apparatus according to claim 36 
claim 32 , wherein a template is defined comprising a group of 
nodes in the network corresponding to a category of the 
modules in the system and an expected alarm that would be 
caused by one of the malfunctions in the modules in the 
category, and wherein the processor is arranged to instantiate 
the template in the causal network responsive to an occurrence 
of the expected alarm in the extracted sequence of alarms . 

41. (Original) Apparatus according to claim 32, wherein 
the plurality of interlinked modules comprises multiple 
instances of a given one of the modules interlinked in a 
regular pattern, and wherein a template is defined comprising 
a group of nodes in the network corresponding to the given one 
of the modules, and wherein the processor is arranged to 
instantiate the template with respect to one or more of the 
modules responsive to the alarm. 

42. (Original) Apparatus according to claim 41, wherein 
the template comprises an expected alarm that would be caused 
by one of the malfunctions in one of the instances of the 
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given one of the modules, and wherein the processor is 
arranged to instantiate the template by adding an instance of 
the template to the network responsive to an occurrence of the 
expected alarm . 

43. (Original) Apparatus according to claim 32, wherein 
the processor is arranged to identify a local fault condition 
in the one of the modules in which the fault occurred, and 
responsive to the local fault condition, to link the fault in 
the causal network to one of the malfunctions occurring in the 
one of the modules. 

44. (Original) Apparatus according to claim 32, wherein 
the processor is arranged to identify a first fault condition 
occurring in a first one of the modules due to a connection 
with a second one of the modules in the system, and responsive 
to the first fault condition, to link the fault in the causal 
network with a second fault condition occurring in the second 
one of the modules. 

45. (Original) Apparatus according to claim 44, wherein 
the processor is arranged to determine that a possible cause 
of the second fault condition is due a further connection 
between the second one of the modules and a third one of the 
modules in the system, and responsive to the further 
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connection, to link the fault in the causal network with a 
third fault condition occurring in the third one of the 
modules . 

46. (Original) Apparatus according to claim 32, wherein 
the processor is arranged to add to the causal network 
multiple occurrences of one of the malfunctions responsive to 
the respective probabilities of the malfunctions, and to link 
the fault in the causal network to the multiple occurrences. 

47. (Original) Apparatus according to claim 46, wherein 
the processor is arranged to determine one or more fault 
conditions that are caused by each of the occurrences, and to 
link at least some of the fault conditions to the fault. 

48. (Original)' Apparatus according to claim 32, wherein 
the at least one of the probabilities of the malfunctions is 
expressed as a mean time between failures of the one or more 
of the modules. 

49. (Original) Apparatus according to claim 32, wherein 
the probabilities of the malfunctions are defined in terms of 
a probability distribution having a mean and a moment, and 
wherein the processor is arranged to update the mean and the 
moment of the distribution. 
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50. (Original) Apparatus according to claim 49, wherein 
the probability distribution comprises a failure rate 
distribution, and wherein the processor is arranged to update 
the failure rate distribution using a Bayesian Reliability 
Theory model . 

51. (Original) Apparatus according to claim 32, wherein 
the processor is arranged to compare one or more of the 
updated probabilities to a predetermined threshold, and to 
invoke diagnostic action when the one of the probabilities 
exceeds the threshold. 

52. (Original) Apparatus according to claim 51, and 
comprising a user interface, wherein the processor is coupled 
to notify a user of the system of the diagnosis via the user 
interface . 

53. (Original) Apparatus according to claim 52, wherein 
the processor is arranged to provide via the user interface an 
explanation of the diagnosis based on the causal network. 

54. (Original) Apparatus according to claim 51, wherein 
the diagnostic action comprises a diagnostic test that is 
performed to verify the malfunctions, wherein the test is 
selected responsive to the one of the probabilities exceeding 
the threshold. 
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55. (Original) Apparatus according to claim 54, wherein 
the processor is arranged to modify the causal network 
responsive to a result of the diagnostic test. 

56. (Currently amended) Apparatus for diagnosis of a 
system made up of a plurality of interlinked modules, the 
apparatus comprising a diagnostic processor, which is arranged 
to construct a causal network associating a fault in one of 
the modules with malfunctions in two or more of the modules 
that may have led to the fault and relating a conditional 
probability of the fault to respective probability 
distributions of the malfunctions, and responsive to an alarm 
from the system indicative of the fault, to update the 
probability distributions of the malfunctions so as to propose 
a diagnosis of the alarm responsive to the updated 

pr obab i 1 i t i e s 

wherein the two or more of the modules comprise first and 
second modules, and wherein the processor is arranged to 
identify a first fault condition occurring in the first module 
due to a connection in the system with the second module, and 
responsive to the first fault condition, to link the fault in 
the causal network with a second fault condition occurring in 
the second module . 
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57. (Original) Apparatus according to claim 56, wherein 
the probability distributions are indicative of a mean time 
between failures of the two or more of the modules. 

58. (Original) Apparatus according to claim 56, wherein 
the probability distributions have a mean and a moment, and 
wherein the processor is arranged to reassess the mean and the 
moment of the distribution responsive to the alarm. 

59. (Original) Apparatus according to claim 58, wherein 
the probability distributions comprise failure rate 
distributions, and wherein the processor is arranged to update 
the failure rate distributions using a Bayesian Reliability 
Theory model . 

60. (Original) Apparatus according to claim 56, wherein 
the two or more of the modules comprise the one of the modules 
in which the fault occurred, and wherein the processor is 
arranged to identify a local fault condition in the one of the 
modules, and responsive to the local fault condition, to link 
the fault in the causal network to one of the malfunctions 
occurring in the one of the modules . 

61. (Canceled) 
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62 . (Currently amended) Apparatus according to claim 61 
claim 56 , wherein the two or more of the modules comprise a 
third module, and wherein the processor is arranged to 
determine that a possible cause of the second fault condition 
is due a further connection in the system between the second 
module and the third module, and responsive to the further 
connection, to link the fault in the causal network with a 
third fault condition occurring in the third module. 

63 . (Currently amended) A computer software product for 
diagnosis of a system made up of a plurality of interlinked 
modules, the product comprising a computer- readable medium in 
which program instructions are stored, which instructions, 
when read by a computer, cause the computer to receive an 
alarm from the system indicative of a fault in one of the 
modules and, responsive to the alarm, to construct a causal 
network associating the fault with malfunctions in one or more 
of the modules that may have led to the fault and relating a 
conditional probability of the fault to respective 
probabilities of the malf unctions , and based on the alarm and 
the causal network, to update at least one of the 
probabilities of the malfunctions so as to propose a diagnosis 
of the alarm responsive to the updated probabilities_^ 
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wherein the instructions cause the computer to receive 
event reports from the plurality of the modules in the system, 
and to extract the alarm from the event reports, and 

wherein the instructions cause the computer to extract a 
sequence of alarms occurring at mutually proximal times, 
including the alarm indicative of the fault in the one of the 
modules, and to process the sequence of the alarms so as to 
update the probabilities . 

64 . (Canceled) 

65. (Currently amended) A product according to claim 6<L 
claim 63 , wherein the event reports comprise a report of a 
change in configuration of the system, and wherein the 
instructions cause the computer to construct the causal 
network based on the changed configuration. 

66. (Original) A product according to claim 65, wherein 
the instructions cause the computer, responsive to the report 
of the change in the configuration, to update a database in 
which the configuration is recorded, for use in constructing 
the causal network. 

67. (Canceled) 

68. (Currently amended) A product according to claim 67 
claim 63 , wherein respective lifetimes are defined for the 
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alarms, responsive to expected delays in receiving the alarms 
from the system, and wherein the instructions cause the 
computer to select the alarms to extract from the sequence 
responsive to the respective lifetimes . 

69. (Original) A product according to claim 68, wherein 
the instructions cause the computer to select the alarms that 
occurred within their respective lifetimes of a time of 
occurrence of the alarm indicative of the fault in the one of 
the modules responsive to which the causal network is 
constructed . 

70. (Currently amended) A product according claim 6 7 
claim 63 , wherein the instructions cause the computer, in 
constructing the causal network, to define an expected alarm 
that would be caused by one of the malfunctions in the one or 
more of the modules, and to update the probabilities 
responsive to an occurrence of the expected alarm in the 
extracted sequence of alarms. 

71. (Currently amended) A product according to claim 67 
claim 63 , wherein a template is defined comprising a group of 
nodes in the network corresponding to a category of the 
modules in the system and an expected alarm that would be 
caused by one of the malfunctions in the modules in the 
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category, and wherein the instructions cause the computer to 
instantiate the template in the causal network responsive to 
an occurrence of the expected alarm in the extracted sequence 
of alarms . 

72. (Original) A product according to claim 63, wherein 
the plurality of interlinked modules comprises multiple 
instances of a given one of the modules interlinked in a 
regular pattern, and wherein a template is defined comprising 
a group of nodes in the network corresponding to the given one 
of the modules, and wherein the instructions cause the 
computer to instantiate the template with respect to one or 
more of the modules responsive to the alarm. 

73. (Original) A product according to claim 72, wherein 
the template comprises an expected alarm that would be caused 
by one of the malfunctions in one of the instances of the 
given one of the modules, and wherein the instructions cause 
the computer to instantiate the template by adding an instance 
of the template to the network responsive to an occurrence of 
the expected alarm. 

74. (Original) A product according to claim 63, wherein 
the instructions cause the computer to identify a local fault 
condition in the one of the modules in which the fault 
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occurred, and responsive to the local fault condition, to link 
the fault in the causal network to one of the malfunctions 
occurring in the one of the modules . 

75. (Original) A product according to claim 63, wherein 
the instructions cause the computer to identify a first fault 
condition occurring in a first one of the modules due to a 
connection with a second one of the modules in the system, and 
responsive to the first fault condition, to link the fault in 
the causal network with a second fault condition occurring in 
the second one of the modules. 

76. (Original) A product according to claim 75, wherein 
the instructions cause the computer to determine that a 
possible cause of the second fault condition is due a further 
connection between the second one of the modules and a third 
one of the modules in the system, and responsive to the 
further connection, to link the fault in the causal network 
with a third fault condition occurring in the third one of the 
modules . 

77. (Original) A product according to claim 63, wherein 
the instructions cause the computer to add to the causal 
network multiple occurrences of one of the malfunctions 
responsive to the respective probabilities of the 
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malfunctions, and to link the fault in the causal network to 
the multiple occurrences. 

78. (Original) A product according to claim 77, wherein 
the instructions cause the computer to determine one or more 
fault conditions that are caused by each of the occurrences, 
and to link at least some of the fault conditions to the 
fault. 

79. (Original) A product according to claim 63, wherein 
the at least one of the probabilities of the malfunctions is 
expressed as a mean time between failures of the one or more 
of the modules. 

80. (Original) A product according to claim 63, wherein 
the probabilities of the malfunctions are defined in terms* of 
a probability distribution having a mean and a moment, and 
wherein the instructions cause the computer to update the mean 
and the moment of the distribution. 

81. (Original) A product according to claim 80, wherein 
the probability distribution comprises a failure rate 
distribution, and wherein the instructions cause the computer 
to update the failure rate distribution using a Bayesian 
Reliability Theory model. 
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82. (Original) A product according to claim 63, wherein 
the instructions cause the computer to compare one or more of 
the updated probabilities to a predetermined threshold, and to 
invoke diagnostic action when the one of the probabilities 
exceeds the threshold. 

83. (Original) A product according to claim 82, and 
wherein the instructions cause the computer to notify a user 
of the system of the diagnosis. 

84. (Original) A product according to claim 83, wherein 
the instructions cause the computer to provide to the user an 
explanation of the diagnosis based on the causal network. 

85. (Original) A product according to claim 82, wherein 
the diagnostic action comprises a diagnostic test that is 
performed to verify the malfunctions, wherein the test is 
selected responsive to the one of the probabilities exceeding 
the threshold. 

86. (Original) A product according to claim 85, wherein 
the instructions cause the computer to modify the causal 
network responsive to a result of the diagnostic test. 

87. (Currently amended) A product for diagnosis of a 
system made up of a plurality of interlinked modules, the 
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product comprising a computer- readable medium in which program 
instructions are stored, which instructions, when read by a 
computer, cause the computer to construct a causal network 
associating a fault in one of the modules with malfunctions in 
two or more of the modules that may have led to the fault and 
relating a conditional probability of the fault to respective 
probability distributions of the malfunctions, and responsive 
to an alarm from the system indicative of the fault, to update 
the probability distributions of the malfunctions so as to 
propose a diagnosis of the alarm responsive to the updated 
probabilities^^ 

wherein the two or more of the modules comprise first and 
second modules, and wherein the instructions cause the 
computer to identify a first fault condition occurring in the 
first module due to a connection in the system with the second 
module, and responsive to the first fault condition, to link 
the fault in the causal network with a second fault condition 
occurring in the second module . 

83- (Original) A product according to claim 87, wherein 
the probability distributions are indicative of a mean time 
between failures of the two or more of the modules. 

89. (Original) A product according to claim 87, wherein 
the probability distributions have a mean and a moment, and 
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wherein the instructions cause the computer to reassess the 
mean and the moment of the distribution responsive to the 
alarm. 

90. (Original) A product according to claim 89, wherein 
the probability distributions comprise failure rate 
distributions, and wherein the instructions cause the computer 
to update the failure rate distributions using a Bayesian 
Reliability Theory model. 

91. (Original) A product according to claim 87, wherein 
the two or more of the modules comprise the one of the modules 
in which the fault occurred, and wherein the instructions 
cause the computer to identify a local fault condition in the 
one of the modules, and responsive to the local fault 
condition, to link the fault in the causal network to one of 
the malfunctions occurring in the one of the modules. 

92. (Canceled) 

93. (Original) A product according to claim 87, wherein 
the two or more of the modules comprise a third module, and 
wherein the instructions cause the computer to determine that 
a possible cause of the second fault condition is due a 
further connection in the system between the second module and 
the third module, and responsive to the further connection, to 
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link the fault in the causal network with a third fault 



condition occurring in the third module. 
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